docs: def describe_group(record, region):
      """Attempts to  describe group ids."""
      account_id = record['account']
      group_name = cloudwatch.filter_request_parameters('groupName', record)
      vpc_id = cloudwatch.filter_request_parameters('vpcId', record)
      group_id = cloudwatch.filter_request_parameters('groupId', record, look_in_response=True)
  
      # Did this get collected already by the poller?
      if cloudwatch.get_collected_details(record):
          LOG.debug(f"[<--] Received already collected security group data: {record['detail']['collected']}")
          return [record['detail']['collected']]
  
      try:
          # Always depend on Group ID first:
          if group_id:  # pylint: disable=R1705
              return describe_security_groups(
                  account_number=account_id,
                  assume_role=HISTORICAL_ROLE,
                  region=region,
                  GroupIds=[group_id]
              )['SecurityGroups']
  
          elif vpc_id and group_name:
              return describe_security_groups(
                  account_number=account_id,
                  assume_role=HISTORICAL_ROLE,
                  region=region,
                  Filters=[
                      {
                          'Name': 'group-name',
                          'Values': [group_name]
                      },
                      {
                          'Name': 'vpc-id',
                          'Values': [vpc_id]
                      }
                  ]
              )['SecurityGroups']
  
          else:
              raise Exception('[X] Did not receive Group ID or VPC/Group Name pairs. '
                              f'We got: ID: {group_id} VPC/Name: {vpc_id}/{group_name}.')
      except ClientError as exc:
          if exc.response['Error']['Code'] == 'InvalidGroup.NotFound':
              return []
          raise exc